Spices sells cookery books and food products (collectively ‘Goods’). In selling these Goods we may collect, use and disclose personal information. Personal information is information or an opinion, in any form and whether true or not, about an individual whose identity is apparent or can reasonably be ascertained from the information or opinion.
Collection of personal information by us
We will only collect your personal information where it is reasonably necessary for or directly related to the conduct of our functions or activities. We will typically collect personal information in the course of providing our Goods to customers and in other dealings with those customers and prospective customers. We may also collect personal information as we determine necessary from time to time for any purpose in connection with the general conduct of our business, for example, in dealing with suppliers, service providers and contractors.
Where we collect your personal information we will do so only by lawful and fair means and not in an unreasonably intrusive way. Where we collect your personal information, and it is reasonable and practicable to do so, we will collect it directly from you. There may be occasions where we receive or collect personal information about you from a third party. Where is it is lawful or practical to do so, you may choose to deal with us anonymously (for example, when enquiring about our products generally.)
Kinds of information collected
The kinds of personal information we collect and hold will depend on the reasons for, or circumstance of, its collection. It may include, amongst other things:
- your name and contact details;
- other personal information you give us when you request a product from us. This information may include your requirements with respect to specific products; your opinion or preferences with respect to any of our products, payment details or your preferred payment method;
- information contained in any communications between you and us;
- information contained in an application form or other document given to us;
- payment and transactional information about your acquisition and use of products sold to you;
- activity with our digital or online applications; and
- any information we are require to collect by law.
Collection of other information from our website and online
We provide information and products online via our website, and also through email and social media profiles.
Site visit information
When you visit our website, we and/or our contractors collect general information about your visit which may include your server address, the date and time of your visit, the pages you accessed, the information you downloaded and the type of Internet browser you used.
We and our contractors may use this information in anonymous, aggregated form, for statistical purposes to assist us in improving the quality and usability of our website.
Other digital services
Our systems record a variety of information in relation to interactions with our online services. This can include information about software versions used, device identifiers (like IP address), (location data, where available not disabled by the user), dates, times, file metadata, referring website, data entered and user activity such as links clicked.
How your personal information will be collected and held
We may collect your personal information in relation to your interactions and transactions with us, including when you place an order online, contribute to our social media pages and use related digital services. We may monitor and record your communications with us, including communication by email and telephone, for security, dispute resolution, and training purposes.
We may also collect personal information from third parties including public sources, information service providers who administer our products such as insurance, anyone authorised to act on your behalf. We hold personal information electronically and in hard copy form, both at our premises and with the assistance of service providers.
We implement a range of measures to protect the security of that personal information. We also take measures in respect of destroying or de-identifying personal information that is no longer needed for any lawful purpose. Unfortunately the Internet is not a secure place and we cannot guarantee the security of your personal information.
We will not collect, use or disclose sensitive information about you unless it is necessary to provide you with a product and we have your consent or unless we are legally required to collect, use or disclose such information.
Sensitive information is any information about a person’s racial or ethnic origin, political opinions, religious or political beliefs or affiliations, membership of a professional, trade or political association or union, sexual preferences or practices, criminal record, health information or genetic information about an individual that is not otherwise health information.
Use of your personal information
We collect your personal information so that we can use it for or in connection with our business function and activities. This may include, amongst other things:
· confirming your identity when you contact us;
· accepting and processing orders;
· providing you with any of our goods and services or information about those goods and services;
· providing you with information about charities or charitable purposes or activities we proudly support;
· being aware of any special food requirements you may have;
· providing you with electronic confirmation of your orders, where applicable, and advising you of any changes to our goods and services;
· delivering orders;
· providing refunds or discounts;
· communicating directly with you, including direct marketing, and providing marketing communications and targeted advertising to you on any ongoing basis by telephone, electronic messages (e.g. email), our digital services and other means. You can contact us on email@example.com at any time to opt out of electronic and telephone direct marketing communications.
· conducting product and marketing research;
· maintaining and updating records;
· working with our service providers;
· administering and managing the provision of our Goods and services to you, including billing and debt collection;
· conducting reviews or checks of your creditworthiness;
· addressing any queries, feedback or complaints we receive from you;
· developing, improving and marketing our goods and services;
· complying with relevant laws, regulations and Codes; and
· using your personal information for any other purpose that it was collected for or any related purpose for which we are entitled to use your personal information.
Where we are unable to collect personal information that we require to conduct a particular function or activity, it may restrict or limit our ability to conduct or perform that function or activity.
Use and disclosure of your personal information for secondary purposes
If we use or disclose your personal information for a purpose (secondary purpose) other than the main reason for which it was originally collected (primary purpose), to the extent required by law, we will ensure that:
· the secondary purpose is related to the primary purpose of collection, and directly related in the case of sensitive information, and you would reasonably expect that we would use or disclose your information in that way;
· you have consented to the use or disclosure of your personal information for the secondary purpose;
· the use or disclosure is required or authorised by or under law; or
· the use or disclosure is otherwise permitted by law, for example as a necessary part of an investigation of suspected lawful activity.
Transborder data flows
We will only transfer personal information to someone who is in a foreign country if:
· we reasonably believe that the recipient of the information is subject to a law, binding scheme or contract which effectively upholds principles for fair handling of information that are substantially similar to the Privacy Act;
· you consent to the transfer;
· the transfer is necessary for the performance of a contract between you and us, or for the implementation of pre-contractual measures taken in response to your request;
· the transfer is necessary for the conclusion or performance of a contract concluded in the interest of you between us and a third party;
· all of the following apply:
o the transfer is for your benefit;
o it is impracticable to obtain your consent to that transfer;
o if it were practicable to obtain such consent, you would be likely to give it; or
· we have taken reasonably steps to ensure that the information transferred will not be held, used or disclosed by the recipient of the information consistently with the Privacy Act.
Security of your personal information
We protect any personal information that we collect and hold about you from misuse to loss. We also protect it from unauthorised access, modification or disclosure. Where we need to disclose your personal information to a service provider or other agent or contractor, we prohibit them from using the personal information except for the specific purpose that we have provided it.
We will take reasonable steps to destroy or de-identify personal information if it is no longer needed for any purpose for which the information may be used or disclosed in accordance with the Privacy Act.
Keeping your personal information up-to-date and correcting your personal information
We take reasonable steps to ensure that any personal information collected by us is accurate and up-to date at the time of collecting, using and disclosing that information.
If you learn that personal information we hold about you is inaccurate, incomplete or out-of-date, you should contact us.
You also have a right to request that a statement be attached to your personal information if we disagree with your request to correct the information.
Access to your personal information
You can ask to obtain access to personal information we hold about you, although in some circumstances, the law may not permit us to provide such information to you. If we are not able to provide you with access to any of your personal information held by us, we will tell you the reasons why this is the case. We may ask you to put your request in writing and pay a reasonable fee to us before providing requested access.
How to contact us
If you wish to contact us, for example, to access or correct your personal information, you may contact us at firstname.lastname@example.org If you wish to unsubscribe from receiving marketing and other communications from us, please send your request to email@example.com
If you have any feedback or a complaint about the way we have dealt with your personal information, please contact us at firstname.lastname@example.org. We will make reasonable attempts to respond to your complaints or requests.
If you are not satisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner at www.oaic.gov.au.
Further information about the application of privacy law generally can be found by contacting the Office of the Australian Information Commissioner (see details above).